The DORA register of information is the structured record financial entities must maintain and update under Article 28(3) for contractual arrangements involving ICT services. It supports ICT third-party risk management and supervisory reporting. Commission Implementing Regulation (EU) 2024/2956 provides the standard templates and defines the ICT service supply chain, including ranks for direct providers and subcontractors.
FAQ
Regulatory Compliance